This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft File: xP8jscNxNS85tz05pOB_jKmMzWc.mft (raw, json) Hash identifier: uOfb1ZD2o9cOTshEC8JzHHmnzWbSRTbyhWeeOYoi5VY= Subject key identifier: A8:7A:35:D6:63:B7:6E:31:48:66:E8:A0:E4:5C:85:F8:FB:85:C4:63 Authority key identifier: C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 Certificate issuer: /CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Certificate serial: 019AF2096F8B45D02477C4C22AFDC2B6162D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft Manifest number: 15F3 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: 5NSYUOXj5LO5RBveLimm0dMK87A.roa (hash: 26b/pGHQTwXlbmbG5ThZm5FqoNcPxzjE+DZsdMKKur0=) 2: Cj0uY_joEUEAfGtiZfe3ZL0PoW0.roa (hash: TH+u6IT5dpk2hfISpLuBXSAh8Mxg3KDgcPA02NCgPeo=) 3: QAdvSCydHA9eyuAMO4zxWjMLaKA.roa (hash: SOXceRa6NpWT+hoKHihDdCbZSJgN5vfd5bbC+z6R+m0=) 4: bYoeFtClejfhTteW6s57MGrpz0M.roa (hash: XiaQPTwLHMkFqSpV5ersN02BOkHiCJtKzXc+PvuUKsk=) 5: mSN_1NgR8_RP_NHRmSVU0520UIo.roa (hash: BRRNK9jtVQ7Ev3axtUha/P9CxSMaCHG6Zn8SMsI5IhM=) 6: vBgsgkwekmg8ZVE8b4TJhK80LrM.roa (hash: c0jtWq7YzOBVoEF72n6cPgI2PZIibyOgb+LV/XfWszE=) 7: xP8jscNxNS85tz05pOB_jKmMzWc.crl (hash: WBpS4FonsTdZfQ7EzfVFXOCZ2PGIuBtR4NqmT88dhxg=) 8: ymgEz60H5B-ezog8RgufDqIOe4s.roa (hash: M39Qnt8qmV0Mg6aCTITlSwk87VUrTu0U+CVvUs7j6K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:8b:45:d0:24:77:c4:c2:2a:fd:c2:b6:16:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4ff23b1c371352f39b73d39a4e07f8ca98ccd67 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=a87a35d663b76e314866e8a0e45c85f8fb85c463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:66:8a:17:6a:99:08:5c:1a:0a:53:9b:2e:84: 04:2f:64:2c:85:35:f6:43:e1:74:be:89:41:c5:51: 01:bd:78:f3:cb:64:60:7f:11:be:06:8d:97:de:d1: ce:6c:1b:42:d2:f2:63:38:a9:89:92:07:d4:86:55: 48:f2:ff:8a:c6:60:34:7e:55:bb:b5:a0:aa:7d:10: fa:18:2c:70:6b:5b:d6:35:59:cf:04:4f:2d:c6:68: f3:da:e7:4d:86:51:c0:49:6e:0e:0f:59:49:b2:5d: 0f:9e:9c:f4:f9:72:c3:d0:41:93:83:3b:6b:1a:83: dd:c2:4e:47:dd:1a:d9:f6:f1:5d:ab:da:47:62:34: a5:ab:51:11:c7:a4:b1:d3:e9:f1:10:c7:51:eb:5e: 0e:14:ef:f3:d5:b8:a4:c3:fa:e7:5c:71:de:f9:68: 24:28:6d:ce:e7:e4:51:ce:74:28:db:81:34:f1:6b: 59:be:ab:90:ac:5b:8c:c3:d5:a8:c7:90:7f:d7:e1: 67:94:96:fa:61:82:0e:41:d3:ea:e4:ce:d7:77:c6: 14:a7:02:f5:f0:40:83:7c:ee:09:8e:fb:ba:47:f8: 28:aa:2f:75:19:33:1f:ec:25:a5:b2:36:1d:59:a8: 4c:4e:c7:e0:44:8e:e7:bb:e4:53:ed:b8:db:0b:a0: c6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7A:35:D6:63:B7:6E:31:48:66:E8:A0:E4:5C:85:F8:FB:85:C4:63 X509v3 Authority Key Identifier: keyid:C4:FF:23:B1:C3:71:35:2F:39:B7:3D:39:A4:E0:7F:8C:A9:8C:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xP8jscNxNS85tz05pOB_jKmMzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c65aab-8a52-476f-9e32-10959aaa8b3e/1/xP8jscNxNS85tz05pOB_jKmMzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:19:d7:cf:63:b0:37:09:e3:45:0b:91:f2:ae:53:04:3a: 80:0c:82:bd:26:a9:9f:0c:7c:94:61:36:aa:22:47:dd:34:1d: 17:c4:68:72:4f:98:93:ab:bc:da:69:48:25:9b:92:70:40:88: 3d:60:b7:ec:58:8a:e6:55:f2:c3:3c:7a:0b:69:75:32:01:18: ce:e9:97:cf:1f:33:3b:ab:b9:4d:33:67:d0:1f:5c:f3:9d:0b: ec:73:75:f1:fa:72:a2:78:20:7c:7c:e1:b1:cb:60:96:27:0a: 25:ae:e3:88:c4:39:56:23:41:74:d6:40:24:49:5b:64:79:ea: 04:2f:5f:77:5c:21:46:4d:5a:1e:d4:b9:b6:59:2a:6f:11:31: 72:90:68:a2:25:33:8a:e7:60:7b:59:41:57:e2:fa:1a:cf:19: fc:88:e0:4f:56:c7:86:17:c9:22:9b:50:f7:da:0b:5b:12:20: 07:94:fd:2b:23:d0:71:7f:45:e2:89:0f:51:ae:e0:a7:c0:c2: 52:c4:02:b9:4c:38:95:5d:99:d5:9e:86:a3:01:f5:8e:bf:29: 4c:88:96:03:33:94:6b:b3:a0:d6:03:30:69:f8:79:d3:c1:95: 24:26:d5:3c:44:08:42:59:55:f3:42:ff:50:60:08:1b:06:f3: f9:7c:2c:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW+LRdAkd8TCKv3CthYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZmYyM2IxYzM3MTM1MmYzOWI3M2QzOWE0ZTA3ZjhjYTk4 Y2NkNjcwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhhODdhMzVkNjYzYjc2ZTMxNDg2NmU4YTBlNDVjODVmOGZiODVjNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmaKF2qZCFwaClObLoQEL2QshTX2 Q+F0volBxVEBvXjzy2RgfxG+Bo2X3tHObBtC0vJjOKmJkgfUhlVI8v+KxmA0flW7 taCqfRD6GCxwa1vWNVnPBE8txmjz2udNhlHASW4OD1lJsl0Pnpz0+XLD0EGTgztr GoPdwk5H3RrZ9vFdq9pHYjSlq1ERx6Sx0+nxEMdR614OFO/z1bikw/rnXHHe+Wgk KG3O5+RRznQo24E08WtZvquQrFuMw9Wox5B/1+FnlJb6YYIOQdPq5M7Xd8YUpwL1 8ECDfO4Jjvu6R/goqi91GTMf7CWlsjYdWahMTsfgRI7nu+RT7bjbC6DGRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKh6NdZjt24xSGbooORchfj7hcRjMB8GA1UdIwQY MBaAFMT/I7HDcTUvObc9OaTgf4ypjM1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzIt MTA5NTlhYWE4YjNlLzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jNjVhYWItOGE1Mi00NzZmLTllMzItMTA5NTlhYWE4YjNl LzEveFA4anNjTnhOUzg1dHowNXBPQl9qS21NeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZwZ189j sDcJ40ULkfKuUwQ6gAyCvSapnwx8lGE2qiJH3TQdF8Rock+Yk6u82mlIJZuScECI PWC37FiK5lXywzx6C2l1MgEYzumXzx8zO6u5TTNn0B9c850L7HN18fpyonggfHzh sctglicKJa7jiMQ5ViNBdNZAJElbZHnqBC9fd1whRk1aHtS5tlkqbxExcpBooiUz iudge1lBV+L6Gs8Z/IjgT1bHhhfJIptQ99oLWxIgB5T9KyPQcX9F4okPUa7gp8DC UsQCuUw4lV2Z1Z6GowH1jr8pTIiWAzOUa7Og1gMwafh508GVJCbVPEQIQllV80L/ UGAIGwbz+XwsIw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:43 2025 by rpki-client